OpenBSD - Remote Kernel MPLS Stack Disclosure (pop.argus-systems.ai)
from cm0002@mander.xyz to openbsd@lemmy.sdf.org on 21 Jun 19:36
https://mander.xyz/post/53983614

mpls_do_error copies (nstk+1) label-stack entries from a fixed 16-entry array when no BoS label is present, leaking 4 bytes of adjacent kernel stack memory in the ICMP/MPLS error response.

#openbsd